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Abstract 

We find all elliptic curves defined over Q that have a rational point of order N, N > 4, 
and whose conductor is of the form p a q b , where p, q are two distinct primes, a, b are two 
positive integers. In particular, we prove that Szpiro's conjecture holds for these elliptic 
curves. 



1 Introduction 

Let E be an elliptic curve denned over Q with minimal discriminant A#. We define the 
conductor Ne of E to be 

Ne = JJ P fp , f P = ord p (A £ ) - m E + 1, 

p|A B 

where is the number of components on the special fiber of the Neron model of E 
defined over F p , f p > 1, see ([12]. Chapter IV, §10, 11). Furthermore, f p — 1 if and only 
if E has multiplicative reduction at p. We recall that Ne and A# have the same prime 
divisors. 

The problem of finding all elliptic curves E defined over Q of a given conductor has 
been investigated in many articles. Ogg produced the complete list of elliptic curves 
whose conductor is a 2-power or 2 a 3 b , see [8] and [9]. A series of papers dealt with the 
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problem under the condition that E has a rational torsion point. For example, in [6] 
the elliptic curves with conductor p m , p is prime, and 2-torsion points were listed. 

It was shown in [5] that all elliptic curves with conductor 2 m p n where p = 3 or 5 
mod 8, p 7^ 3, that have a rational point of order 2, are effectively determined under the 
truth of the conjecture of Ankeny-Artin-Chowla. 

It is worth mentioning that the complete list of elliptic curves with a prime conductor 
has already been produced. The following theorem gives this list explicitly. 

Theorem 1.1 (Theorem 5.3.2, [ID])- Let E be an elliptic curve over Q with prime 
conductor p. Then either | A#| = p or p 2 , or else p — 11 and Ae = ll 5 , or p = 17 and 
Ae = 17 4 , or p = 19 and Ae = 19 3 , or p = 37 and Ae = 37 3 . In particular, Ae \ p 5 ■ 

The elliptic curves in Theorem 11.11 turn out to satisfy Szpiro's conjecture which is 
stated below for the convenience of the reader. 

Conjecture 1.2. If E is an elliptic curve overQ, then 

\A E \ « e N 6 + e 

One of the popular strategies to find elliptic curves E/Q with a given conductor is 
to solve certain Diophantine equations obtained by equating the discriminant of E to 
the product of powers of the prime divisors of the conductor. 

Mazur gave a complete classification of the torsion subgroup E tOTS (Q) of E(Q), see 
(Theorem 7.5, §8, Chapter VIII, [H]). More precisely, E t0 rs{Q.) is isomorphic to one of 
the following fifteen groups: 

Z/nZ, 1 < n < 12, n ^ 11; or Z/2Z x Z/2nZ, 1 < n < 4. 

Given that P 6 E(Q)[m], m ^ 2,3, it is known that there exist b, c G Q such that 
the following Weierstrass equation defines an elliptic curve Eb )C isomorphic to E 

Eb,c '■ y 2 + (1 — c)xy — by = x 3 — bx 2 

with the image of P being (0, 0). The discriminant A(b, c) of Eb }C is given as follows: 

A(b,c) = b 3 (16b 2 - b{8c 2 + 20c - 1) - c(l - c) 3 ) 

By taking m to be an integer in {4,5,6,7,8,9,10,12}, one finds an explicit relation 
between b, c, see for example §2 of [7] . 

In this article, we generalize Theorem 11.11 to elliptic curves whose conductors have 
two distinct prime divisors only. More precisely, we generate the list of all elliptic curves 
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with Q-rational torsion points of order N, N > 4, whose conductor is a product of two 
prime powers. 

Now we give a brief outline for our approach to solve the problem. As we have seen 
the family of all elliptic curves with a rational point of order N can be classified using a 
universal Weierstrass equation. Moreover, we can use certain transformations to write 
integral Weierstrass equations for the elliptic curves E h c . Since the prime divisors of 
the minimal discriminant are exactly those of the conductor, we equate the produced 
discriminant to a product of two prime powers. Consequently, the problem is reduced 
to solving one or several Diophantine equations. 

In fact, the Diophantine equations we produce are more subtle when N 6 {4,5}, 
whereas the corresponding Diophantine equations are elementary when iV > 6. We 
collect the harder Diophantine equations in §2] for more convenience. Several techniques 
are followed to attack these equations including elementary methods, factorization over 
number fields, properties of Lucas sequences, and well-known results from the literature. 

Each family of elliptic curves with rational points of order N is treated separately. 
Given an N, 4 < N < 12, N 11, we list all elliptic curves with a Q-rational iV-torsion 
point such that the conductor has only two distinct prime divisors. Moreover, we find 
a constant K > such that given such an elliptic curve E, the absolute value of the 
minimal discriminant Ag of E is bounded above by the K-th power of the conductor 
Ne- In particular, we prove Szpiro's conjecture for these families of elliptic curves. 
When N = 10, 12, we show that there are no elliptic curves with an iV-torsion point 
whose conductor is a product of two prime powers. 

2 Diophantine equations 

The Catalan's Conjecture (now referred to as Mihailescu's Theorem) will appear several 
times in this article, so we prefer to state it. 

Proposition 2.1 (Mihailescu's Theorem). The only integer solution to the Diophantine 
equation x m — y n = 1, where m, n > 1, is (x, m, y, n) = (±3, 2, 2, 3) . 

Now we start solving some Diophantine equations that we will use to prove our main 
results. 

Lemma 2.2. There are no integer solutions (p,m,y,n) to the equation 

I6p m + l = y n 

where \p\, n are prime integers, m > 1, and y = l l where \l\ is prime and t > 0. 
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PROOF: Let (p, m, y, n) be such solution to 16p m + 1 = y n . We observe that y is odd. 
Furthermore, \p\ 7^ 2, otherwise we will have a Catalan's solution \y n — 2 m+4 | = 1. So 
\p\ is odd. 

We assume n is an odd prime. So p m y > 0. Since 

16p m = y n - 1 = (y - 1) (y^ 1 + y n ~ 2 + . . . + y + 1), 

where the first factor is even, the second factor is the sum of n odd terms, and hence is 
odd. Therefore 16 | y — 1. 

y n -1 y n - 1 

i. If gcd(y — 1, ) = 1, then either y — 1 = 16p m and = 1, which yields 

y - 1 y - 1 

y n — 1 

no solutions, or y = 17 and = 17" _1 + . . . + 17 + 1 = p m . The latter 

y - 1 

equation is not solvable for n > 3,m > 2, see Corollary 1 in pQ. The last possible 
value y = —15 is rejected because it is not a prime power. 

y n — I 

ii. If p I gcd(y — 1, ), then y = 1 mod p. Moreover, y — 1 = ±16p , /i > 0, and 

y - 1 

y" — 1 

= ±p m ~ h . This implies that n = \p\ (n is prime). We observe that 

y- 1 

n— 1 re— 1 i 



re— 1 re— 1 i ✓ .\ 

i=0 i=0 j=0 



p + 

1=1 i=l 

re— 1 j /A 

p ± 16p h n(n - !)/ 2 + XI ( ^ ) ^ ±16p ' 

i— 1 o—9 w/ 



i=l i=2 

Since n = \p\, one has m — h = 1. If we consider the positive sign, the above 
equality is p = p + L, and L > 0, a contradiction. Otherwise, the above equality 
is 

n— 1 i / -\ 

-2p = -16pVp-l)/2 + XX(M(-16p^ 

i=l j=2 

a contradiction. 

Assume n = 2. Then 16p m = y 2 — 1 = (y — l)(y + l). If p | gcd(y — l,y + l), thenp = 2 (a 
contradiction as then we will have a Catalan's solution, y 2 — 2 m+4 = 1). Otherwise, we 
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either have y+l = ±2 a p m and y - 1 = ±2 4 " a , so y G {17, 9, 5, 3, 2, 0, -1, -3, -7, -15} 
with p m = 5, 3, 14 corresponding to y — 9, —7, —15, or y — 1 = ±2 Q p m and y+1 = ±2 4_a , 
so y = 7, —17, —9 with p m = 3, 18, 5. These solutions are rejected. □ 

Lemma 2.3 (Lemma 5.5, j2]). The only positive integer solutions (x,y,h,n) to the 
equation 

x 2 + 2 h = y n , n > 1, y odd, h>2 
are {x, y, h, n) = (7, 3, 5, 4) and (x, y, n) = (2 h - 2 - 1, 2 h ~ 2 + 1,2). 

Now we use some techniques in elementary number theory to find the integer solu- 
tions of some Diophantine equation. 

Lemma 2.4. The integer solutions (x,y,l), I > l,y > 0, to the Diophantine equation 

x 2 - 125 = ±Ay l (1) 

are 

{(±15, 5, 2), (±63, 31, 2), (±11, 1, 1), (±5, 5, 2), (±25, 5, 3)}, 
or I is odd, 5 \ x, and x 2 — 125 = Ay . 
PROOF: We consider many possibilities: 

i. x 2 — 125 = —Ay 1 : By investigating perfect squares of the form 125 — 4A, one find 
the following possible solutions: 

{(±11, 1, /), (±9, 11, 1), (±7, 19, 1), (±5, 5, 2), (±3, 29, 1), (±1, 31, 1)} 

ii. / = 2k and x 2 — 125 = Ay 1 : Then we can write (x — 2y k )(x + 2y k ) = 125. Therefore, 
we can assume that (x — 2y k ) e {±1, ±5, ±25, ±125}. Consequently, I = 2 and we 
have 



x — 2y k 


±1 


±5 


±25 


±125 




(±63, ±31) 


(±15, ±5) 


(±15, ±5) 


(±63, +31) 



iii. I is odd, x 2 — 125 = Ay 1 , and 5 | x: Then 5 | y. Since / > 3, one has 25 | x. In 
fact, / = 3 and 5 || y. Dividing by 125, one has 5(x/25) 2 — 1 = 4(y/5) 3 . If (x, y) is 
an integer solution to the latter equation, then (X, Y) = (100(x/25), 20(y/5)) is a 
solution to X 2 - k = Y 3 , k = 2000. In [4], all Mordell's equations with \k\ < 10000 
were solved in Z. In fact, the only solutions of X 2 — 2000 = Y 3 are (±100, 20) and 
(±44, —4). Therefore, the only integer solution of x 2 — 125 = Ay 1 , I odd, and 5 | x 
is (±25,5,3). 
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iv. I is odd, x 2 — 125 = Ay 1 , and 5 { x: We notice that in both x and y are odd. 
In fact, this equation has a finite number of integer solutions. 

□ 

Corollary 2.5. The only integer solutions (s,y,l) of the Diophantine equation 

s 2 - lis - 1 = ±y l 

where \s\,y > are prime powers, I > 1, are 

{(13, 5, 2), (-2, 5, 2), (37, 31, 2), (11, 1, 1), (8, 5, 2), (3, 5, 2), (-7, 5, 3)}, 

or I is odd and s 2 — lis — 1 = y l . 

PROOF: After completing the square, one has 

x 2 - 125 = ±Ay l , where x = 2s - 11. 

According to Lemma 12. A\ we obtain the above triples. We observe that the triples 
(—26,31,2) and (18,5,3), corresponding to (x,y,l) = (—63,31,2) and (25,5,3) are 
rejected, because \s\ is not a prime power. □ 

3 Elliptic curves with rational n-torsion points 

Let E/Q be an elliptic curve with minimal discriminant A# and conductor A?£. Given 
that P G E(Q)[m], m > 4, there exist b, c G Q such that the following Weierstrass 
equation defines an elliptic curve E b c isomorphic to E 

Eb,c '■ V 2 + (1 - c)xy - by = x 3 - bx 2 (2) 

with the image of P being (0, 0). The invariants c 4 (6, c) and A(6, c) of E b)C are as follows: 

c 4 (6, c ) = 166 2 + 86(1 - c) (c + 2) + (1 - c) 4 
A(b,c) = b 3 (16b 2 -b(8c 2 + 20c- 1) - c(l - c) 3 ) 

By taking m to be an integer in {4, 5, 6, 7, 8, 9, 10, 12}, one obtains an explicit relation 
between b, c, see §2 of [7] . 
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3.1 Case n = 4 

Assuming that P G i£(Q)[4], one has that c = in (E}. We set A := 6. The following 
Weierstrass equation describes E: 

E : y 2 + xy — \y = x 3 — Ax 2 

g 

Assume A = -, s,t G Z, gcd(s,£) = 1. We obtain an integral Weierstrass equation 

describing using the following change of variables i n> i/t 2 , y n> y/t 3 . This integral 
equation is 

E : y 2 + txy — st 2 y = x 3 — stx 2 

with the following invariants 

A E = s 4 t 7 (16s + t) 
c 4 = t 2 (16s 2 + lQst + t 2 ) 
c 6 = -t 3 (-64s 3 + 120s 2 t + 24st 2 + t 3 ) 

Theorem 3.1. LetE/Q be an elliptic curve such that i£(Q)[4] ^ {0}. Assume moreover 
that Ne = pq where p ^ q are primes. Then |A#| = p a q 13 is given as follows: 



2 4 x 3, 2 4 x 5, 2 4 x 3 7 , 2 8 x 7, 2 8 x 3 2 , 2 8 x 7 7 , 3 2 x 7, 3 2 x 5 2 , and, 



|A B | 


2 2k+A p 


2 2fe + 4 p 4 


2 4fc p 


2 4fe p 7 


p 4 g b 


pV 6 




p 4 V 




p,q 


p = 2 k - i ±1, k > 4 


p = 2 fc + 4 ±1, k > 


16p± 1 = fe > 1 


q = 16p fc ±1, fc > 1 


? _ p 2k + 16] fc > Q 



PROOF: Let s,t G Z be such that -E is given by the following Weierstrass equation 



E : y 2 + txy — st 2 y = x 3 — stx 2 , where A E = s 4 t 7 (16s + t) 

One has gcd(s, t) = gcd(s, 16s + 1) — 1, and gcd(t, 16s + t) — 2 k , where < k < 4, 
otherwise 2 fc_4 | s, which is a contradiction. In fact, if k > 1, then the Weierstrass 
equation is not minimal at 2. Moreover, if ord p (t) is odd, then E has additive reduction 
at p. 

We first treat the case that | A#| = 2 a p b where p is an odd prime, and a, b > 0. Given 
s and t, the following table gives the possible values for A E = s 4 t 7 (16s + t) = 2 a p /3 . 
Observe that the table includes all possible values for A#, even when E has additive 
reduction at some prime divisor of t. 
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"\ 1-1 
1*1 ^\ 


2 m 


2 m n 


»" 


1 


2 k ,k > 4 






-2 5 x 3 8 ,2 3 x 3 4 
±p i 2 7k+ \p = 2 k - 4 ±l 


2 5 x 3 2 ,2 3 x 3 
±2 7k+4 p,p= 2 fe - 4 ± 1 


2 fc ,l < k < 4 








2 s x 3 2 ,-2 8 x 7 
-2 4 x 3,2 4 x 5 


2 k p l ,k> 4, 










2V,1 <k<A 








2 8 x 3 2 ,±2 8 x 7 7 
±2 4 x 3 7 ,2 4 x 5 7 


P l 


±2 4 > 7 , p = 2 4+m ± 1 








1 


±2 4m p, p = 2 4+m ± 1 









When (|s|, \t\) = (2 m ,p l ), we need to find solutions to 1 16s + 1\ — |2 4+m ±p l \ = 1. 
Therefore, we either have the unique Catalan solution or I — 1, see Proposition 12. II The 
same reasoning and coprimality give the remaining possible values of in the above 
table. Recall that if ord p (£) > 1, then E is not minimal at p, and we should consider 
ord^A^) mod 12. 

Now we assume 2 \ N E . So without loss of generality we can assume that gcd(t, 16s + 
t) = 1. Therefore, at least one of \s\, \t\, 1 16s + 1\ is 1. 

Case |s| = 1: Then |A#| = \t 7 (t ± 16)|. Assuming A^^ = pq, one observe that if 
\t\ = p a , a > 1, then E is not minimal at p. In fact, if a = 1 mod 2, then after minimizing 
E we obtain that ord p (c4) = 2^0 and hence has additive reduction at p contradicting 
the fact that p\\Ne- Therefore, we assume \t\ = p 2a and |A#| = p 2a \p 2a ± 16| = p 2a q b . 
Thus we need to solve |p 2a ± 16| = q b . Lemma [231 gives the solution (p,a,q,b > 1) = 
(±3, 1, ±5, 2) to the equation p 2a + 16 = q b , and Ae = 3 2 x 5 2 . A simple factorization 
argument shows that the only solution to p 2a — 16 = g fe is (±5, 1, ±3, 2), and A^ = 3 2 x 5 2 . 
The solution to 16 - p 2a = q b is (±3, 1, 7, 1), with A E = 3 2 x 7. 

Case \t\ = 1: Then \A E \ = |s 4 (16s ± 1)| = p Aa q b , in other words, 1 16s ± 1| = 
\16p a ± 1| = q b . According to Lemma [2.2[ a = 1 or b = 1, and so \A E \ = p A q b or p Aa q 
respectively. 

Case 1 16s + 1\ — 1: Then we want to solve 16p m — q n ± 1, and A# = s 4 t 7 . Again, 
according to Lemma [2.21 |A#| = p 4m q 7 or p A q ln . □ 

Theorem 3.2. LetE/Q be an elliptic curve such that E(Q)[4] ^ {0}. Assume moreover 
that N E = pq where p ^ q are primes. Then \A E \ < N E 2 . In particular, E/Q satisfies 
Szpiro's conjecture. 
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PROOF: We only need to check that | A E \ < N E 2 for the values of | A#| given in Theorem 
13.11 This is straightforward for the first row of possible values of |A#| appearing in 
Theorem 13.11 In fact, |A#| < iVjL 

Now we are going to verify that \A E \ < iVf 2 for the values of \A E \ in the table of 
Theorem 13.11 

\A E \ = 2 2k+4 p m = 2 12 2 2(k - 4 \2 k - 4 ± l) m < 2 12 [2 x (2 fc ~ 4 ± l)] 2 (2 fc " 4 ± l) m 

< 2 14 (2 fc - 4 ± l) 2+m < 2 10 (2 fc - 4 ± l) 6+m < N™, where m = 1, 4 
\A E \ = 2 4k p m = 2 4fc (2 fc+4 ± l) m < (2 fc+4 ± l) 4 (2 fc+4 ± l) m = p m+4 < N E \ where m = 1, 
|A E | = p 4 g mfe = p 4 (16p ± l) m < p 4 x p 4m = p 4m+4 < iV 4m+4 , where m = 1, 7 
|A E | = p 4fc g m = p 4fe (16/ ± l) m < (16/ ± l) 4 (16p fc ± l) m = g m+4 < iV™+ 4 , where m = 
| A B | = p 2k q = p 2k (p 2k + 16) < (p 2k + 16) 2 = q 2 < N 2 

□ 

3.2 Case n = 5 

Assuming that P e P(Q)[5], one has that b = c in (T5]). Set X = b. Then the following 
Weierstrass equation describes P: 

P : y 2 + (1 - A)xy - Ay = a; 3 - Ax 2 

Assume A = -, s,t 6 Z. We can obtain an integral Weierstrass equation describing 
P using the following change of variables x t— > x/t 2 , y i— )■ y/t 3 . This integral equation is 

P : y 2 + (t — — st 2 y = x 3 — stx 2 

where the invariants of P are given by 

A E = sH 5 {s 2 -llst-t 2 ) 
c 4 = 2Ast 2 {-s + t) + (s 2 -6st + t 2 ) 2 

Theorem 3.3. LetE/Q be an elliptic curve such that P(Q)[5] ^ {0}. Assume moreover 
that N E = p a qP where p ^ q are primes, and a, (3 > 0. Then \A E \ = p a q b is given as 
follows: 

2 5 x 5 2 , 2 15 x 5 2 , 3 5 x 5 2 , 13 5 x 5 2 , 37 5 x 31 2 , 7 5 x 5 3 , p 5k q 2l+1 
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PROOF: As we saw above there exist s,teZ such that E is given by the equation 



E : y 2 + (t — s)xy — st 2 y = x 3 — stx 2 

The assumption that Ne is a product of two distinct prime powers together with the 
fact that gcd(i, s) = gcd(s, s 2 — list — t 2 ) = gcd(t, s 2 — list — t 2 ) = 1 imply that at least 
one of |s|, \t\, \s 2 — list — t 2 \ is 1. 

Case \t\ = 1: Then one has Ae = s 5 (s 2 =plls — 1). Consequently s and s 2 ^flls — 1 are 
both prime powers. Now we are going to solve the Diophantine equation s 2 =F lis — 1 = 
±y l and spot out the integer solutions (s, y, I) where s, y are prime powers. Completing 
the square, we need to find the integer solutions of 

x 2 - 125 = ±Ay\ wehre x = 2s =p 11 

The solutions of the latter Diophantine equation is given in Lemma 12.41 In fact, we 
obtain the following table: 



(x,s,y,l) 
(±15, ±13, 5, 2) 
(±15, ±2, 5, 2) 
(±63, ±37, 31, 2) 
(±63, ±26, 31, 2) 



±13 5 x 5 2 
±2 5 x 5 2 
±37 5 x 31 2 
±26 5 x 31 2 



(x,s,y,l) 
(±25, ±7, 5, 3) 
(±5,±2 3 ,5,2) 
(±5,^3,5,2) 
(x,s,q,l), \s\ =p k 



±7 5 x 5 3 
±2 15 x 5 2 
^3 5 x 5 2 
±p 5k q 



or |A_g| = p 5k q 2l+l for finitely many possible primes q. 

Case \s\ = 1: Then A^ = t 5 (l^fllt—t 2 ). Similarly, we need to solve the Diophantine 
equation 125 — x 2 = ±4y* where x = 2t ± 11. In fact, we obtain the same values given 
in the above table. 

Case |s 2 — list — t 2 \ = 1: Thus \s\ = p m , \t\ = q n and |A^| = p 5m q 5n . Now we 
complete the square and have that \(2p m =p llg n ) 2 — 125q 2n \ = 4. Any solution to the 
latter equation will yield a solution to the Diophantine equation x 2 — 125y 2 = ±4, where 
x = 2p m =p llg n and y = q n . We will start solving x 2 — 125y 2 = —4 which is a Pell's 
equation for which we have the solution (11,1). Thus any other solution (x, y) is given 
by ^ 

x + yVT25 /11 + VT25 
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see for example Proposition 6.3.16 in [3J. One has 

| = |!^Qll*-i+Q^ll^xl25 + ...+ Qllxl25( & - 2 )/ 2 ^, if A; is even 

f = § (V + Q H^ 2 x 125 + Q ll fe " 4 x 125 2 + . . . + Q 11 x 125M/ 2 ) , if k is odd 

Consequently, if k is even, then q = 11. Similarly, if is odd, then 11 | x and p — 11. If 

g = 11, we have |s 2 ^ll" +1 s-ll 2n | = 1, and s = - (±ll n+1 ± ^/ll 2n + 2 - 4(-ll 2 " =f 1)) . 

This implies that there is a A G Z such that A 2 = 125 x ll 2n ± 4. However, A 2 + 4 = 
125 x ll 2 ™ is not solvable by considering it mod 11 as then A 2 = —4 mod 11 which 

contradicts that the Legendre symbol ^T7/^ = — ^' Moreover, A 2 — 4 = 125 x ll 2n 

can be shown to be non-solvable because A — 2 and A + 2 are coprime. Thus A — 2 G 
{±1, ±125, ±ll 2n , ±125 x ll 2n }, and the only possible value for \s\ is 122 which is not 
a prime power. An identical argument holds when p — 11. 

Now we solve the equation x 2 — 125y 2 = 4. When q is odd, one has that x — 2 
and x ± 2 are coprime. Following the same argument in the previous paragraph, \s\ 
cannot be a prime power. Now assume q = 2. We divide by 4 and obtain the new 
Diophantine equation x 2 — 125 x 2 2 " -2 = 1, or (x — l)(x + 1) = 125 x 2 2n ~ 2 , and 
x - 1 G {±2 2n - h - 2 x 125, 2 2n - h - 2 : h > 0}. Consequently, either x + 1 = ±2 h = 
±2 2n-h-2 x 125 ± 2, or x ± 1 = ±2 h x 125 = 2 2n - h - 2 + 2. Therefore, h = 1 or 
2n — h — 1 = 1 which is a contradiction in both cases. □ 

Theorem 3.4. LetE/Q be an elliptic curve such that E(Q)[5] 7^ {0}. Assume moreover 
that Ne = p a qP where p 7^ q are primes, and a, (3 > 0. Then \ A&\ < N E . In particular, 
E/Q satisfies Szpiro's conjecture. 

PROOF: We check that |A#| < N E for the possible values of A# given in Theorem 13.31 
In fact, this is clear except when |A#| = p 5h q. 

In the proof of Theorem 13.31 we observe that q =\ p 2k =F llp h — 1 |. In fact, p 2k =F 
Hp k — 1 > p k when p k > 11. In the latter case 

N E = p 6 (p 2k THp k -I) 6 =P%p 2k Tllp k -l)\p 2k Tllp k -1) 
> p 6+5k (p 2k =F llp k - 1) > p bk q =| A s I 

We are left with treating a finite number of possible cases, namely 

p k e {2,3,4,5,7,8,9,11} 

Straight forward calculations show that for all these cases if Ne is a product of two 
distinct prime powers, then I A E |< N%. □ 
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3.3 Case n = 6 

Let P G £'(Q)[6]. There exists a A 6 Q such that the following Weierstrass equation 
describes E: 

y 2 + (l- \)xy - A(A + l)y = x 3 - A(A + l)x 2 

Assuming A = s/t, gcd(s,i) = 1, we may use the transformation x i— >■ x/t 2 , y i— >■ y/t 3 to 
obtain the following Weierstrass equation 

y 2 + {t- s)xy - (t 2 s + ts 2 )y = x 3 - (st + s 2 )x 2 

where the invariant of E are given by 

A E = s 6 t 2 (s + t) 3 (9s + t) 
c 4 = (3s + t) (3s 3 + 3s 2 t + 9st 2 + t 3 ) 

Theorem 3.5. LetE/Q be an elliptic curve such that -E'(Q) [6] ^ {0}. Assume moreover 
that N E = p a qP where p ^ q are primes, and a, (3 > 0. Then A E is given as follows: 

2 x 7 2 , -2 2 x 7, 2 3 x 7 6 , 2 4 x 5, -2 4 x 3 3 , 2 6 x 17, -2 6 x 7 3 , 2 s x 3 3 , -2 s x 5 2 

In particular, \A E \ < N E , and Szpiro's conjecture holds for E. 

PROOF: Let s,t E Z, gcd(s,t) = 1, be such that the following Weierstrass equation 
describes E 

y 2 + (t- s)xy - (t 2 s + ts 2 )y = x 3 - (st + s 2 )x 2 

where 

gcd(s, t) = gcd(s, s + t) — gcd(t, s + t) — gcd(s, 9s + t) — 1 

and 

gcd(t, 9s + 1) | 9, gcd(s + t,9s + t) | 8 

Case i. Assume gcd(t, 9s + t) — gcd(s + t, 9s + t) = 1. Then at least two of 
|s|, \s + t\, \9s + t\ = 1. If s = t = ±1, then s + t = ±2, 9s + t = ±10, and A £ = 2 4 x5. 
When s = ±1, s + t = +1, one has t = +2, 9s + t = ±7, and A E = -2 2 x 7. When 
| s | = |9 s +t| = 1, one has that (s, t, 9s+t, s+t) e {(±1, +8, ±1, +7), (±1, +10, +1, +9)}, 
and the first quadruple yields = — 2 6 x 7 3 . When t = ±1, s + t = +1, one has s = +2, 
9s+t = +17, and A s = 2 6 xl7. The possibilities \t\ = \9s+t\ = 1 and \s+t\ = \9s+t\ = 1 
are rejected. 
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Case ii. Assume gcd(t, 9s + t) = 3 k and gcd(s + 1, 9s + 1) = 2 l where 1 < k < 
2,< I < 3. Then \t\ = 3 / , \s + 1\ = 2 9 and \s\ = 1. In other words, |1 ± 3 / | = 2 9 . 
According to Proposition 12. 1[ the only integer solutions of the latter equation will yield 
the following set of quadruples 

(s, t, s + t, 9s + t) G {(±1, ±3, ±2 2 , ±12), (±1, =f3, ±2, ±6), (±1, T 3 2 , T 2 3 , 0)}. 

The first quadruple gives Ag = 2 8 x 3 3 , whereas the second gives = — 2 4 x 3 3 . 

Case iii. Now assume gcd(s + 1, 9s + 1) = 2 l , 1 < I < 3, and gcd(t, 9s + t) = 1. The 
following table provides the possible values of the discriminant of E: 



\9s + t\ 

\s + t\ 


2f 


2fp m 




-2 8 x 5 2 , 2 13 x 7 2 , 2 15 x 7 6 




23q n 


2 4 x 5 





If {\s + t\, \9s + t\) = {2 f , 2 9 ), then 2 9 = \9s + t\ = \8s ± 2 f \. It follows that either 
/ = g = 2 or min(/, g) = 3. We obtain the following quadruples (s, t, s + t,9s + 
t) E {(±1,±7,±2 3 ,±2 4 ),(±1,^5,t2 2 ,±2 2 ),(±7,±1,±2 3 ,±2 6 )}. The first and third 
quadruples give non- minimal elliptic curves and so we have to minimize them. If (\s + 
t\,\9s + t\) G {(2 / p m ,2 £ '), (2 / ,2 9 g n )}, then \s\ = \t\ = 1 and the second pair gives 
s + t = ±2, 9s + t = ±10. 

Case iv. Assume gcd(t, 9s + t) = 3 l , I G {1,2}, and gcd(s + t,9s + t) = 1. In 
fact, the only prime divisor of t and 9s ± t is 3, since otherwise \s\ — \s + t\ — 1 where 
t is divisible by 3. Therefore, |9s + t\) = (3^,3 9 ) where min(/,g) G {1,2}, and 
\A E \ = s 6 3 2f (s + t) 3 (±3 9 ). Either \s\ or \s + t\ is 1. If \s\ = 1, then 3 9 = \9s + t\ = 
| ± 9 ± 3^| and there is no integer s satisfying the latter equalities. If \s + 1\ = 1, then 
39 = \9s+t\ = \9(s+t)-8t\ = |9±8x3 / |. The only quadruple (s, t, s+t, 9s+t) satisfying 
the latter equalities under the condition that min(/, g) G {1,2} is (±10, =f3 2 , ±1, ±3 4 ), 
but then Ae has three distinct prime divisors. □ 

3.4 Case n = 7 

Let P G E(Q)[7]. Then there exists a A G Q such that the following Weierstrass equation 
describes E: 

y 2 + (1 - A(A - l))xy - A 2 (A - l)y = x 3 - A 2 (A - l)x 2 

Theorem 3.6. LetE/Q be an elliptic curve such that E(Q)[7] 7^ {0}. Assume moreover 
that Ne = p a q 13 where p, q are distinct primes, and a, (3 > 0. Then Ae = — 2 7 x 13. In 
particular, \A E \ < N E , and Szpiro's conjecture holds for E. 
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PROOF: Assuming A = s/t, gcd(s, t) = 1, we use the transformation x 14 x/i 4 , y \-¥ y/t 6 
to obtain the following integral Weierstrass equation describing E 



y 2 + (t 2 - s 2 + st)xy - s 2 (st 3 - t 4 )y = x 3 - (s 3 t - s 2 t 2 )x 2 



with invariants 

A E = s 7 t 7 (s-t) 7 (s 3 -8s 2 t + 5st 2 + t 3 ) 
c 4 = (s 2 - st + t 2 ) (s 6 - 1 ls 5 t + 30s 4 t 2 - 15s 3 t 3 - 10s 2 t 4 + 5st 5 + t 6 ) 

We set k = s 3 - 8s 2 t + 5st 2 + t 3 . Then 

gcd(s, t) = gcd(s, s — t) — gcd(s, k) = gcd(t, s — t) = gcd(t, k) = gcd(s — t,k) = 1. 

Since A# has only two distinct prime divisors, then at least two of \s\, \t\, \s — 1\, \ k\ are 
ones. Indeed, if two of|s|,|t|,|s — t\ are ones, then the only corresponding discriminant 
is A E = -2 7 x 13. 

If | s | = \k\ = 1, then | ± 1 - 8t ± 5t 2 + 1 3 \ = 1 and either t = 0, or t = s = ±1 which 
yields s — £ = 0. The same holds if \t\ — \k\ — 1 or |s — 1| = = 1. □ 

3.5 Case n = 8 

Let P G £'(Q)[8]. Then there exists a A G Q such that E is described by the following 
Weierstrass equation: 



Theorem 3.7. Let E/Q be an elliptic curve such that E(Q) [8] ^ {0}. Assume moreover 
that Ne = p a q 13 where p ^ q are primes, and a, j3 > 0. Then Ae = — 2 11 x 3 8 . In 
particular, \A E \ < N 7 E , and Szpiro's conjecture holds for E. 

PROOF: In the above Weierstrass equation we take A = s/t where gcd(s,t) = 1. Then 
we apply the transformation 




(2A-1)(A-1) 



A 



^-(2A-l)(A-l)y = a; 3 



(2A-l)(A-l)x 2 




to obtain the following integral Weierstrass equation 



y 2 - (t 2 - Ast + 2s 2 )xy - ts 3 (s - t)(2s - t)y = x 3 - s 2 (s - t)(2s - t)x 2 
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where 



A E = s 8 t 2 (s-t) 8 (2s-t) 4 (8s 2 -8st + t 2 ) 
c 4 = 16s 8 - 64s 7 t + 224s 6 t 2 - 448s 5 t 3 + 480s 4 t 4 - 288s 3 t 5 + 96s 2 t 6 - 16st 7 + t 8 

If t is even, one has that \s\, \t\, \s — t\ and \s — t/2\ are pairwise coprime, so at least 
two of these are ones. If \s\ — \s — 1\ — 1, then s = ±1, t — ±2 and 2s — t = 0. If \s\ — 
\s-t/2\ = 1, then s = ±1, t = ±4, s-t = ^3, 8s 2 -8st + t 2 = -8 and A E = -2 11 x3 8 . 
If s - i = ±1, s - t/2 = =Fl, then s = =f3, t = =f4, 2s - t = =p2, 8s 2 - 8st + t 2 = -8 and 
A B = -2 11 x 3 8 . 

If t is odd, then at least two of \s\, \t\, \s — t\ and \2s — t\ are ones. The following 
table contains \st(s - t)(2s - t)(8s 2 - 8st + t 2 )\. 





\s\ = 1 


\t\ = 1 


\2s-t\ = 1, t odd 


\a-t\ = l 


t even 


2 x 3 x 17 


2x3x7 


\2s - t\ = 1, t odd 


2x3x7 







1*1 = 1 


2 x 3 x 17 







Therefore, the only elliptic curve with an 8-torsion point and whose conductor is a 
product of two distinct prime powers is the one with A E = — 2 11 x 3 8 . We observe that 
its invariant c 4 = — 2 4 x 47, so it has additive reduction over F 2 and N E = 2 2 x 3. □ 

3.6 Case n = 9 

Let P E E(Q)[9]. There exists a A G Q such that E is described by the following 
Weierstrass equation: 

y 2 + (1 - A 2 (A - 1)) xy - A 2 (A - 1)(A 2 - A + l)y = x 3 - A 2 (A - 1)(A 2 - A + l)x 2 

Theorem 3.8. LetE/Q be an elliptic curve such that E(Q)[9] ^ {0}. Assume moreover 
that N E = p a qP where p ^ q are primes, and a,f3 > 0. Then A E = — 2 9 x 3 5 . In 
particular, \A E \ < N E , and Szpiro's conjecture holds for E. 

PROOF: In the above Weierstrass equation we take A = s/t where gcd(s,t) = 1. Then 
we apply the transformation 

x y 
t 6 t 9 

to obtain the following integral Weierstrass equation describing E 

y 2 + (t 3 - s 2 (s - *)) xy - t 4 s 2 (s - t)(s 2 - st + t 2 )y = x 3 - ts 2 (s - t)(s 2 - st + t 2 )x 2 
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where 

A E = s 9 t 9 (s-t) 9 (s 2 -st + t 2 ) 3 (s 3 -6s 2 t + 3st 2 + t 3 ) 
c 4 = ( s 3 - 3s 2 t + t 3 ) (s 9 - 9s 8 t + 27 s 7 t 2 - 48s 6 t 3 + 54s 5 t 4 - 45s 4 t 5 + 27 s 3 t 6 - 9s 2 t 7 + t 9 ) 

since s 2 — st + t 2 = (s — t) 2 + st, the first four factors s,t,s — t, s 2 — st + t 2 of A E 
are pairwise coprime. Therefore, at least two of the absolute values of these factors are 
ones. If s = ±1, t = =Fl, then s - t = ±2, s 2 - st + t 2 = 3, s 3 - 6s 2 t + 3st 2 + t 3 = ±9, 
A E = -2 9 x 3 5 . If |s| = \s - t\ = 1, then s = ±1, t = ±2, s - t = =Fl, s 2 - st + 1 2 = 3, 
s 3 -6s 2 t + 3st 2 + t 3 = ±9, A E = -2 9 x 3 5 . If s = ±1, -1 = s 2 -st + t 2 = l^t + t 2 , then 
there is no integer t satisfying the latter equalities. If s = ±1, |s 3 — Qs 2 t + 3st 2 +t 3 \ = 1, 
then t = ±1. We will have the same results if we replace \s\ — 1 by \t\ = 1. If \s — 1\ — 1 
and |s 2 — st + t 2 1 = \(s — t) 2 + st\ = |1 + st\ = 1, then st = —2, a contradiction. 

The only elliptic curve with a 9-torsion point and whose conductor is a product of 
two distinct prime powers is the one with A E = — 2 9 x 3 5 . We observe that 0^3(04) > 0, 
so it has additive reduction over F 3 and A?£ = 2 x 3 2 . □ 



3.7 Case n = 10 

Let P E £'(Q)[10]. There exists a A G Q such that the following Weierstrass equation 
describes E: 

( A(A-1)(2A-1) \ A 3 (A-1)(2A-1) A 3 (A - 1)(2A - 1) 

V + V + (A 2 -3A + 1) y y (A 2 -3A + 1) 2 V ~ (A 2 -3A + 1) 2 

Theorem 3.9. There exists no elliptic curve E/Q with E(Q)[10] ^ {0} and N E = p a q 13 
where p 7^ q are primes, and a, j3 > 0. 

Proof: In the above Weierstrass equation we take A = s/t where gcd(s,t) = 1. Then 
we apply the transformation 

x y 

X t 2 (s 2 -3st + t 2 ) 2 ' V t 3 (s 2 -3st + t 2 ) 3 

to obtain the following integral Weierstrass equation 

y 2 + [t(s 2 - 3st + t 2 ) + s(s - t)(2s - t)] xy - t 2 s 3 (s - t)(2s - t)(s 2 - 3st + t 2 )y 

= x 3 - ts 3 (s - t)(2s - t)x 2 

where 

A E = s 10 t 5 (s - t) 10 (2s - t) 5 (4s 2 - 2st - t 2 )(s 2 - 3st + t 2 ) 2 
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The factors s,t,s — t, s 2 — 3st + t 2 are pairwise coprime. Therefore, at least two of 
|s|, \t\, \s — t\, \s 2 — 3st + t 2 \ are ones. The following table contains the product \st(s — 
t)(2s-t)(4s 2 -2st-t 2 )(s 2 -3st + t 2 )\ when two of \s\, \t\, \s-t\, \s 2 -3st + t 2 \ are ones. 





l*l = i 


1*1 = 1 


1* — *l = 1 


|2s-i| = 1 


\4s 2 - 2st - t 2 \ = 1 


\s 2 -3st + t 2 \ =1 


66 


870, 66 


0,66 


870,66,0 





\4s 2 -2st-t 2 \ = 1 


60 





60 







\2s-t\ = 1 


66 





30 






k-*| = i 





66 








l*l = i 


30 











It is clear that E cannot have a discriminant with only two distinct prime divisors. 

□ 



3.8 Case n = 12 

Let P G £'(Q)[12]. There exists a A G Q such that the following Weierstrass equation 
describes E: 

2 / A(2A- 1)(3A 2 -3A + 1)\ A(2A - 1)(3A 2 - 3A + 1)(2A 2 - 2A + 1) 

f 2 + ( 1 + J — ihrr ) xy ( aV Ly 

3 A(2A-1)(3A 2 -3A + 1)(2A 2 -2A + 1) 2 
~ X (A^lT x 

Theorem 3.10. There exists no elliptic curveE/Q with E(Q) [12] ^ {0} and N E = p a q /3 
where p ^ q are primes, and a, (3 > 0. 

PROOF: In the above Weierstrass equation we take A = s/t where gcd(s,t) = 1. Then 
we apply the transformation 

x y 

x *-> -J? — txb, y ^ 



i2( s _f)6'» t 3 (s-t)$ 

to obtain the following integral Weierstrass equation 

y 2 + [t(s - tf + s{2s - t)(3s 2 - 3st + t 2 )] xy - ts{s - t) 5 {2s - t)(3s 2 - 3st + t 2 )(2s 2 - 2st + t 2 )y 

= x 3 - s{s - t) 2 (2s - t)(3s 2 - 3st + t 2 )(2s 2 - 2st + t 2 )x 2 

where 

A E = s 12 t 2 (s - t) l2 (2s - tf(3s 2 - 3st + t 2 ) 4 (2s 2 - 2st + t 2 ) 3 (6s 2 - 6st + t 2 ) 
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If t is even, then two of \s\, \t\, \s — t\ and \s — t/2\ are ones. If t is odd, then two of 
\s\, \t\, \s—t\ and |2s— 1\ are ones. In both cases, one finds that the product corresponding 
to Ae is either or has more than two prime divisors. □ 

Acknowledgements. I would like to thank Michael Bennett for spotting out a mistake 
in the proof of Theorem 13 .31 I would also like to thank Andrzej Dabrowski for sharing 
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